845 matches found
Apache Struts 2.x < 2.3.14.2 Remote Code Execution Vulnerability (S2-013)
The version of Apache Struts running on the remote host is 2.x prior to 2.3.14.2. It, therefore, is affected by a remote code execution vulnerability in the URL and Anchor tags due to a flaw in handling the includeParams attribute. A remote, unauthenticated attacker can exploit this issue, via a...
Ubuntu: Security Advisory (USN-3715-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS : dns-root-data update (USN-3715-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3715-1 advisory. This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover and refreshes the list of root hints. Tenable has...
Ubuntu 16.04 LTS : Dnsmasq update (USN-3716-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3716-1 advisory. This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover. Tenable has extracted the preceding description block...
USN-3716-1 dnsmasq update
This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover...
USN-3715-1: dns-root-data update
This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover and refreshes the list of root hints...
USN-3715-1 dns-root-data update
This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover and refreshes the list of root hints...
Design/Logic Flaw
A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier...
CVE-2017-7844
CVE-2017-7844 【Firefox】 is caused by a combination of an external SVG image on a page and coloring of links within that image, enabling a malicious site to infer which pages a user has visited in history. Affected: Firefox 57; earlier releases are not affected. The issue is mitigated by upgrading...
CVE-2017-7844
A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier...
Design/Logic Flaw
An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred...
CVE-2018-7251
An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred...
CVE-2018-7251
Anchor CMS 0.12.3 is vulnerable due to an error in config/error.php that exposes an errors.log URI. The log can contain MySQL credentials when errors occur (e.g., Too many connections), enabling information disclosure. Affected component: error logging; impact: credential exposure. Remediation: u...
CVE-2018-7251
An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred...
CVE-2017-16861
It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files to occur. An attacker who can access the web interface of Fisheye or Crucible or who hosts a website that a user who can access the web interface of Fisheye or Crucible visits, is...
KLA11150 Multiple vulnerabilities in Mozilla Firefox
Multiple serious vulnerabilities have been found in Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information. 1. A vulnerability in IndexedDB component can be exploited remotelly to obtain sensitive information; 2. A rendering of external SVG images and anchor...
DNSSEC Key Signing Key Rollover Postponed
The Internet Corporation for Assigned Names and Numbers ICANN has announced that the change to the Root Zone Key Signing Key KSK scheduled for October 11, 2017, has been postponed. A new date for the Key Roll has not yet been determined. DNSSEC is a set of DNS protocol extensions used to digitall...
anchor-cms cross-site scripting vulnerability
anchor-cms is an open source light blogging system. The system supports Markdown editor , custom fields and multiple languages and so on. A cross-site scripting vulnerability exists in versions prior to anchor-cms 0.9-dev. A remote attacker can exploit this vulnerability to inject arbitrary web...
